Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.mft
File:                     iGueLpgWv6rZz8yAbo39KCT1A0Q.mft (raw, json)
Hash identifier:          GiRBGHMPITdbc08bJV6N8BZ6uOu5so71DO+TJjiSyaY=
Subject key identifier:   F1:2B:DF:66:2C:0E:9B:17:58:65:A7:D5:33:66:B3:86:1D:BD:B2:10
Authority key identifier: 88:6B:9E:2E:98:16:BF:AA:D9:CF:CC:80:6E:8D:FD:28:24:F5:03:44
Certificate issuer:       /CN=886b9e2e9816bfaad9cfcc806e8dfd2824f50344
Certificate serial:       01976DAB45244049FCE3FA040ED3CDFE58DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iGueLpgWv6rZz8yAbo39KCT1A0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.mft
Manifest number:          0CEC
Signing time:             Sat 14 Jun 2025 09:00:30 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:30 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:30 +0000
Files and hashes:         1: iGueLpgWv6rZz8yAbo39KCT1A0Q.crl (hash: V1BUBwfHrYWv/AIRiOppk2gUAG8wHSjRQrMvUJIf63Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iGueLpgWv6rZz8yAbo39KCT1A0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:45:24:40:49:fc:e3:fa:04:0e:d3:cd:fe:58:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=886b9e2e9816bfaad9cfcc806e8dfd2824f50344
        Validity
            Not Before: Jun 14 09:00:30 2025 GMT
            Not After : Jun 15 09:00:30 2025 GMT
        Subject: CN=f12bdf662c0e9b175865a7d53366b3861dbdb210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:68:ff:56:04:a7:47:fb:e7:0e:ef:49:9a:9d:
                    69:5b:7c:28:f9:d8:c2:28:14:52:d6:1a:6e:ad:01:
                    46:bd:0e:28:33:7f:af:89:f2:2d:c1:c6:22:34:c0:
                    e6:e8:c9:d1:79:9e:dc:f3:1a:03:8a:e2:91:94:eb:
                    09:4a:1a:57:14:e8:25:b6:ac:07:ae:ed:fe:af:1f:
                    03:f6:59:18:5e:79:e8:9d:e4:e0:a1:e9:c2:80:4e:
                    72:e2:2a:8f:2a:5a:b9:b5:d6:bc:36:e8:00:e8:7a:
                    b2:f9:b4:e4:b8:96:2e:1f:50:87:83:87:ed:7d:e4:
                    ff:7c:cb:a4:c3:23:b5:3a:1f:11:6d:c4:76:88:50:
                    12:2a:52:73:aa:ea:37:15:66:e4:08:8f:b2:c2:59:
                    d2:5b:bc:7e:da:36:1d:55:9b:6d:88:74:dc:19:74:
                    be:44:54:50:96:46:1e:6c:3e:57:03:56:25:5c:20:
                    29:e3:2b:60:02:57:e7:cd:f8:a2:98:e2:19:d4:6e:
                    aa:d4:a5:22:9d:db:c4:4a:e4:cc:c4:ce:77:0e:0b:
                    04:27:3d:de:28:6f:1f:6a:ea:69:ca:59:c2:b8:29:
                    45:68:d9:b3:db:4e:92:1d:35:b2:e6:52:ca:63:3d:
                    fb:95:d9:da:ff:1d:15:4a:d2:d0:a4:d3:61:c5:49:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2B:DF:66:2C:0E:9B:17:58:65:A7:D5:33:66:B3:86:1D:BD:B2:10
            X509v3 Authority Key Identifier:
                keyid:88:6B:9E:2E:98:16:BF:AA:D9:CF:CC:80:6E:8D:FD:28:24:F5:03:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGueLpgWv6rZz8yAbo39KCT1A0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e5:07:95:84:f1:5c:c9:12:1d:a4:1d:85:89:85:d5:ee:2b:
         f7:9a:62:e3:a8:2a:a0:94:79:02:9c:9e:dd:59:2f:a1:84:1a:
         0c:76:d9:b7:b7:d6:b1:b3:42:e4:d8:53:29:b6:0a:be:e9:29:
         98:71:d0:09:9f:b7:0e:47:70:ac:97:17:88:c2:cc:de:be:c2:
         25:ce:3f:47:39:38:8d:64:9b:f3:30:0e:d6:7b:db:35:c1:f6:
         bc:49:0c:4b:90:d3:25:b5:36:83:39:24:53:7e:25:bb:fa:90:
         6d:5f:03:04:84:5a:ff:fa:b8:05:f0:f8:bf:b9:8e:d4:32:29:
         ae:4b:50:14:27:f9:76:18:93:e0:01:a2:28:36:c5:a7:4e:34:
         58:66:94:ff:31:25:e1:48:64:e1:34:8a:1f:75:4f:94:3a:de:
         53:bf:b7:a0:39:26:4f:09:45:36:ce:ef:2d:2f:d4:e2:47:12:
         c2:75:c4:70:68:22:73:b5:5d:c3:6d:8c:45:74:d5:ff:d1:03:
         ce:41:59:6b:4d:f0:32:b6:a8:ce:4e:aa:71:5e:90:af:51:a5:
         2a:50:f3:83:e0:e1:44:18:ed:8b:24:40:70:d5:d3:86:9d:72:
         9d:5f:a6:d5:a1:53:4b:ee:bc:71:53:fc:2d:7f:4c:0a:d3:12:
         b5:3d:4a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:17 2025 by rpki-client